CVE-2017-17599

Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter...

CVE-2017-17602

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...

Sql injection

Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter...

Sql injection

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...

CVE-2017-17599

Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter...

CVE-2017-17602

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...

CVE-2017-17602

CVE-2017-17602 affects the PHP Scripts Mall Advance B2B Script v2.1.3. The vulnerability is an SQL Injection: the application processes user-supplied parameters via tradeshow-list-detail.php (show_id) or view-product.php (pid) without adequate input validation, enabling arbitrary SQL commands. Pu...

Advance B2B Script 2.1.3 - show_id / pid SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Advance B2B Script 2.1.3 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/advance-b2b-script/ Demo: http://198.38.86.159/advancedb2...

Advance B2B Script 2.1.3 - show_id pid SQL Injection

Advance B2B Script 2.1.3 - showid pid SQL Injection Exploit Title: Advance B2B Script 2.1.3 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/advance-b2b-script/ Demo: http://198.38.86.159/advancedb2b/...

Directory traversal

Directory traversal vulnerability in QND Advance/Standard allows an attacker to read arbitrary files via a specially crafted command...

CVE-2017-10861

Directory traversal vulnerability in QND Advance/Standard allows an attacker to read arbitrary files via a specially crafted command...

CVE-2017-10861

Directory traversal vulnerability in QND Advance/Standard allows an attacker to read arbitrary files via a specially crafted command...

CVE-2017-10861

The CVE-2017-10861 issue affects QND Advance/Standard from QualitySoft Japan. A directory traversal vulnerability exists in the administrative server due to how input from an agent program is processed (CWE-22). If a specially crafted command is processed, an attacker can obtain or modify arbitra...

QualitySoft QND Directory Traversal Vulnerability

QualitySoft QND is a suite of IT asset management solutions from QualitySoft Japan. The solution features external media control, device operation log viewing and URL filtering. A directory traversal vulnerability exists in QualitySoft QND Advance/Standard. An attacker can exploit this...

QND Advance/Standard vulnerable to directory traversal

Overview QND Advance/Standard provided by QualitySoft Corporation contains a directory traversal vulnerability. QND Advance/Standard provided by QualitySoft Corporation contains a directory traversal vulnerability CWE-22 in an administrative server due to the issue in processing input from an age...

419 scammer offers USD $60 million—and a free child

Scammers often come crawling out of the woodwork in all sorts of places you wouldn't necessarily expect. This is to their advantage when trying to keep suspicion in check; after all, we're pretty much pre-programmed to think 419 scams will only wander into our inboxes. Twitter, though? That's a...

Nigerian scams without the Nigerians

Users in English speaking countries are quite familiar with the Nigerian scam: an important guy in Nigeria needs your help getting his money out of the country and if you assist with some transaction fees, a chunk of his fortune could be yours. But what about non-English speaking countries? What...

Threat Outbreak Alert RuleID30103: Email Messages Distributing Malicious Software on August 7, 2017

Medium Alert ID: 54768 First Published: 2017 August 7 17:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30103 may contain the following files: Name | Si...

Setup file of advance preparation untrusted search path vulnerability

Setup file of advance preparation is an installation file for a series of software released by the National Tax Agency NTA of Japan. An untrusted search path vulnerability exists in the Setup file of advance preparation installer. An attacker can exploit this vulnerability to gain privileges via ...

Design/Logic Flaw

Untrusted search path vulnerability in Installer of "Setup file of advance preparation" jizensetup.exe The version which was available on the website prior to 2017 June 12 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...